Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FgLM9cCx4QKe9sxKezfCVVMIRRY.roa
File: FgLM9cCx4QKe9sxKezfCVVMIRRY.roa (raw, json)
Hash identifier: 47ee8QkRa/YEZy4NEgaI1KNuAtneG6Ko9Ht7QzKz3oA=
Subject key identifier: 16:02:CC:F5:C0:B1:E1:02:9E:F6:CC:4A:7B:37:C2:55:53:08:45:16
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 018CC26CF62CC2831BA5E7B5A4FCE7EFC01B
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FgLM9cCx4QKe9sxKezfCVVMIRRY.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201122
IP address blocks: 88.199.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f6:2c:c2:83:1b:a5:e7:b5:a4:fc:e7:ef:c0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1602ccf5c0b1e1029ef6cc4a7b37c25553084516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:39:f9:6a:33:b9:eb:6d:1e:60:2d:a9:71:
3c:eb:69:2b:6b:67:79:f3:20:27:5c:83:af:8b:2a:
5f:ad:20:4e:d2:12:22:8f:41:bc:36:da:4f:3b:05:
b4:e7:1d:ad:11:4d:e1:a8:12:ab:45:61:62:2e:fe:
73:9c:f1:46:d4:05:17:62:e7:ad:03:3a:3e:4c:54:
38:11:20:41:69:e7:4a:15:ac:b6:3d:41:ac:2b:f9:
49:0c:b1:ab:b8:3c:48:79:ad:db:68:e5:35:25:9c:
50:16:87:02:84:f5:3a:c2:1d:eb:1d:15:d6:19:7b:
20:d2:7e:ca:ab:0f:51:ba:9c:76:9b:37:46:cd:4e:
fb:ff:a6:e0:4d:ec:4c:e7:2a:04:dd:e3:fb:04:06:
63:61:8a:fc:89:cb:de:51:38:7b:16:3e:de:1e:c2:
73:a6:fd:43:68:b5:73:b1:bd:69:91:31:bf:c3:02:
09:61:18:f1:e3:a8:70:8f:9a:a7:e2:ab:5d:90:7d:
f6:2c:d2:03:2e:a6:df:32:b5:e1:24:37:34:6c:32:
f9:51:b9:8f:98:3e:a1:7f:de:bc:37:df:18:19:76:
a6:c0:0b:16:ea:ce:08:63:20:22:73:1a:87:64:21:
47:c1:2b:72:be:79:52:f5:3c:5f:3a:52:63:90:1d:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:CC:F5:C0:B1:E1:02:9E:F6:CC:4A:7B:37:C2:55:53:08:45:16
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FgLM9cCx4QKe9sxKezfCVVMIRRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.172.0/23
Signature Algorithm: sha256WithRSAEncryption
19:15:35:9b:d8:6a:81:32:0c:df:c7:74:d3:46:c1:8a:69:9d:
99:53:46:4d:12:b2:6d:26:f8:1b:23:91:91:68:e4:a7:a6:13:
01:90:ab:3d:fc:bc:37:00:37:90:63:aa:24:10:77:f0:77:7e:
e2:21:83:b8:aa:68:9e:67:6f:1f:d3:04:5c:55:99:9f:4d:93:
85:a5:de:dc:5d:2f:66:0a:e5:fd:ba:26:6d:b3:3a:f4:1b:c3:
d6:d2:68:af:a5:76:64:56:ed:1c:54:95:90:8b:2c:2e:ee:43:
c8:26:73:a6:97:3d:15:fc:1c:4a:6f:a2:5f:97:5d:67:9b:af:
c8:69:f6:56:ec:84:28:70:4c:08:35:dc:7d:66:51:90:f6:34:
fa:17:27:b6:26:66:ce:bf:88:ee:18:9c:f9:d2:66:29:9f:4a:
51:cd:a5:52:43:ea:79:ff:7d:e6:91:f0:a8:7e:d5:ef:8b:d8:
98:83:8b:f0:40:d8:c1:94:0f:22:6a:b4:de:66:76:f9:dd:ac:
1b:c5:df:80:2d:19:93:51:38:ba:f9:35:cc:9a:f5:38:b8:e1:
8f:0b:5a:e6:d6:3e:d1:c0:0b:d1:d2:b9:a7:bc:79:93:1b:94:
76:ee:76:7c:aa:9c:30:79:14:ba:0c:d2:c8:c9:8d:60:94:ec:
79:51:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:09:01 2024 by rpki-client on console-fra.rpki-client.org